You have no items in your shopping cart.
Course Details
Course Details
What You'll Learn
This course prepares you for the PT0-003 certification exam, covering all official exam domains and their approximate weightings:
Domain 1 Engagement Management (13%)
- Summarize pre-engagement activities: scope definition, rules of engagement, agreement types (NDA, MSA, SOW, ToS), target selection, shared responsibility model, legal/ethical considerations
- Explain collaboration and communication activities: peer review, stakeholder alignment, escalation path, goal reprioritization, business impact analysis
- Compare and contrast testing frameworks and methodologies (OSSTMM, CREST, PTES, MITRE ATT&CK, OWASP Top 10/MASVS, threat modeling frameworks DREAD/STRIDE/OCTAVE)
- Explain the components of a penetration test report: executive summary, methodology, detailed findings, attack narrative, recommendations/remediation guidance
- Given a scenario, analyze findings and recommend appropriate remediation (technical, administrative, operational, physical controls)
Domain 2 Reconnaissance and Enumeration (21%)
- Given a scenario, apply information gathering techniques: active/passive reconnaissance, OSINT, DNS lookups, certificate transparency logs, network sniffing, protocol scanning
- Given a scenario, apply enumeration techniques: OS fingerprinting, service/protocol/DNS/directory/host/share/user/email enumeration, attack path mapping
- Given a scenario, modify scripts for reconnaissance and enumeration using Bash, Python, or PowerShell
- Given a scenario, use appropriate tools for reconnaissance and enumeration (Nmap, theHarvester, Shodan, Maltego, Recon-ng, Amass, WHOIS, Wireshark/tcpdump)
Domain 3 Vulnerability Discovery and Analysis (17%)
- Given a scenario, conduct vulnerability discovery using various techniques: container/application/network scans, DAST/IAST/SAST/SCA, authenticated vs. unauthenticated scans, wireless scanning, ICS vulnerability assessment
- Given a scenario, analyze output from reconnaissance, scanning, and enumeration phases: validating results (false positives/negatives, true positives), public exploit selection, scripting to validate results
- Explain physical security concepts: tailgating, site surveys, USB drops, badge cloning, lock picking
Domain 4 Attacks and Exploits (35%)
- Given a scenario, analyze output to prioritize and prepare attacks: target prioritization (CVSS, CVE, CWE, EPSS), capability/tool/exploit selection, attack path and documentation
- Given a scenario, perform network, authentication, and host-based attacks using appropriate tools (Metasploit, Hydra, Mimikatz, CrackMapExec, Impacket, hashcat)
- Given a scenario, perform web application attacks (SQLi, XSS, SSRF, CSRF, file inclusion, JWT manipulation) using tools such as Burp Suite, ZAP, sqlmap, Gobuster
- Given a scenario, perform cloud-based and wireless attacks using appropriate tools (Pacu, ScoutSuite, Prowler, Aircrack-ng, Kismet)
- Given a scenario, perform social engineering attacks (phishing, vishing, pretexting) and explain attacks against specialized systems (mobile, AI/prompt injection, OT/ICS, NFC/Bluetooth)
- Given a scenario, use scripting (PowerShell, Bash, Python) and breach-and-attack simulation tools to automate attacks
Domain 5 Post-exploitation and Lateral Movement (14%)
- Given a scenario, perform tasks to establish and maintain persistence: scheduled tasks, service creation, reverse/bind shells, backdoors, C2 frameworks, rootkits
- Given a scenario, perform tasks to move laterally throughout the environment: pivoting, relay creation, service/credential enumeration, WMI/WinRM, LOLBins, tools like CrackMapExec, Impacket, PsExec
- Summarize concepts related to staging and exfiltration: file encryption/compression, covert channels (DNS, ICMP, HTTPS, steganography), cloud storage, alternate data streams
- Explain cleanup and restoration activities: removing persistence mechanisms and tester-created credentials/tools, reverting configuration changes, secure data destruction
Course Info
Promotion Code
Your will get 10% discount voucher for 2nd course onwards if you write us a Google review.
Minimum Entry Requirement
Knowledge and Skills
- Able to operate using computer functions
- Minimum 3 GCE ‘O’ Levels Passes including English or WPL Level 5 (Average of Reading, Listening, Speaking & Writing Scores)
Attitude
- Positive Learning Attitude
- Enthusiastic Learner
Experience
- Minimum of 1 year of working experience.
Target Age Group: 18-65 years old
Minimum Software/Hardware Requirement
Software:
TBD
Hardware: Window or Mac Laptops
Job Roles
Job Roles
- Penetration Tester
- Ethical Hacker
- Cybersecurity Analyst
- Information Security Consultant
- Vulnerability Analyst
- Security Operations Center (SOC) Analyst
- Network Security Specialist
- IT Security Engineer
- Cybersecurity Auditor
- Compliance and Controls Analyst
- Incident Response Analyst
- Forensic Analyst
- Security Architect
- Risk Assessment Specialist
- Cyber Defense Analyst
- Application Security Engineer
- Cyber Threat Intelligence Analyst
- IT Auditor focusing on security
- Security Systems Administrator
- Information Assurance Technician
Trainers
Trainers
is an accomplished IT and data specialist with over 20 years of experience in academia, ICT leadership, and professional training, with a strong focus on data analytics and Excel-based solutions. He has developed and delivered specialized training programs on Statistical Data Analysis with Excel and Visual Basic for Applications (VBA) for Excel, equipping learners with advanced data manipulation, automation, and reporting skills. His expertise extends to automating institutional reporting systems, where he successfully streamlined academic records management through Excel-based tools, integrating macros and automation to improve efficiency and accuracy. As a trainer and consultant, Dr. Siraj has taught Excel to diverse audiences, including university staff, administrative teams, and professionals in banking, security, and education, ensuring they can apply Excel for decision-making, statistical modeling, and process automation. His practical mastery of Excel is complemented by his deep knowledge of office automation and ICT project management, making him a highly sought-after trainer in data analysis and productivity tools. With his blend of hands-on technical expertise and instructional experience, Dr. Siraj stands out as a credible authority in leveraging Excel to drive organizational efficiency and data-driven strategies
Review
Customer Reviews (8)
- Well structured course Review by Course Participant/Trainee
-
Great course materials and well-paced lessons. The exercises really helped me understand the topic. (Posted on 6/28/2024)1. Do you find the course meet your expectation? 2. Do you find the trainer knowledgeable in this subject? 3. How do you find the training environment - Very satisfied Review by Course Participant/Trainee
-
Really enjoyed the training. The examples were relevant and the pace was just right. (Posted on 6/26/2024)1. Do you find the course meet your expectation? 2. Do you find the trainer knowledgeable in this subject? 3. How do you find the training environment - Very useful course Review by Course Participant/Trainee
-
Great course materials and well-paced lessons. The exercises really helped me understand the topic. (Posted on 4/9/2024)1. Do you find the course meet your expectation? 2. Do you find the trainer knowledgeable in this subject? 3. How do you find the training environment
Write Your Own Review
- Recommended Courses
